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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide secure 
processing of client credentials used for Web-based 
access to resources. 

SOLUTION: A login page with an interface for entering 
user credentials is presented at a client and the entered 
user credentials are sent to a server. In response to 
receiving the user credentials, the server generates a 
unique session ID for the client. The server also derives 
a digital signature for the user credentials based on a 
current key in a rotating key store and the unique 
session ID. The server then encrypts the digital signature 
and the user credentials based on an encryption key 
derived from the current key and the unique session ID. 




When encrypted credentials are received bacic to the client, keys from the rotating key store 
are used to attempt to validate the credentials. If the user credentials can not be validated, a 
user is again presented with a login page. 



LEGAL STATUS 

[Date of request for examination] . 15.11.2006 

[Date of sending the examiner's decision of 

rejection] 

[Kind of final disposal of application other than 
the examiner's decision of rejection or 
application converted registration] 

[Date of final disposal for application] 

[Patent number] 

[Date of registration] 

[Number of appeal against examiner's 
decision of rejection] 

[Date of requesting appeal against examiner's 
decision of rejection] 

[Date of extinction Of right] 



